ID de Prueba:	1.3.6.1.4.1.25623.1.0.63767
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDVSA-2009:089 (opensc)
Resumen:	The remote host is missing an update to opensc;announced via advisory MDVSA-2009:089.
Descripción:	Summary: The remote host is missing an update to opensc announced via advisory MDVSA-2009:089. Vulnerability Insight: OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a (1) low level APDU command or (2) debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program. The updated packages fix the issue. Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0368 BugTraq ID: 33922 http://www.securityfocus.com/bid/33922 Debian Security Information: DSA-1734 (Google Search) http://www.debian.org/security/2009/dsa-1734 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00673.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00686.html http://security.gentoo.org/glsa/glsa-200908-01.xml http://www.opensc-project.org/pipermail/opensc-announce/2009-February/000023.html http://openwall.com/lists/oss-security/2009/02/26/1 http://secunia.com/advisories/34052 http://secunia.com/advisories/34120 http://secunia.com/advisories/34362 http://secunia.com/advisories/34377 http://secunia.com/advisories/35065 http://secunia.com/advisories/36074 SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html XForce ISS Database: opensc-pkcs-unauth-access(48958) https://exchange.xforce.ibmcloud.com/vulnerabilities/48958
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.